
OFFICE OF THE ASSISTANT SECRETARY OF DEFENSE 
1 400 DEFENSE PENTAGON 
WASHINGTON, DC 20301-1400 



PUBLIC AFFAIRS 



War g 1 1997 



Ref : 97-F-0489 



Ms. Victoria Patten 
Director, Software Marketing 
Comdisco, Inc . 

7500 College Blvd., Suite 990 
Overland Park, KS 66210 

Dear Ms. Patten: 

This responds to your March 14, 1997, Freedom of Information 
Act request. Our March 21, 1997, interim response refers. 

The enclosed document is provided as responsive to your 
request. There are no charges for processing this request in 
this instance. 



Sincerely, 




-RT^^^ Passarella 
Director 

Freedom of Information 
and Security Review 



Enclosure : 
As stated 



4^0 




Continuity of Operations 
Software Evaluation 




•u Table of Contents ^ 

Executive Summary ES-1 

Introduction * 1 

Documeht Overview 1 

Project References 1 

Project Background : 2 

Benefits 2 

Summary of Functional Requirements 3 

System Summary .•...•..•.................••....•..•.••.........•••.......•...••...•.•...^ 

Background 5 

Objectives 5 

Existing Methods and Procedures 7 

Proposed Methods and Procedures 8 

Detailed Characteristics...............................................................,......^ 

Approach ..9 

Functional Requirements 9 

Environment 13 

Assumptions and Constraints 13 

System Support Organization 13 

Equipment 14 

Support Software 14 

Communications 15 

Failure Contingencies 15 

Security 15 

System Development Plan « 16 

Commercial Off The Shelf (COTS) Software Vendors and Products 16 

Summary Of Evaluation Comparison 17 

Functional Requirements Matrix 17 

Application Issues 18 

Implementation Issues 20 

Course of Action #1, Rapid Fielding 22 

Course of Action #2, Model-Based Development 22 

Additional Courses of Action 23 

Recommendations 24 

Cost Analysis 25 

Appendix A: Functional Requirements Matrix......................................................... A-1 

Appendix B: Rating Scales B-1 

Strohl Systems - LDRPS, v8.0.4 B-1 

COMDISCO - ComPAS, v3.2.0 B-4 

SunGard - CBR, v2.0 B-7 

Recovery Management, Inc. - REXSYS, v4.2 B-10 

Appendix C: Acronj^ms ............................................................................................... C-1 

i 



This documcni wiis prc]mvJ H\ SRA Inicrn;ni()nal, Inc.. under contraci 



t 



Executi\£e I The Under Secretary of Defense (Policy) has tasked the Office of 

Summary Emergency Planning to lead the continuity of operations project. The main 
goal of this work is to support planning for how the critical prmcipals and 
staff members prepare for and execute notification, movement, and the 
resumption of activities at alternate locations in the case of a contingency 
which makes their primary location untenable. To achieve this goal and 
minimize the cost of the program, there must be management processes m 
use throughout the organization, supported by a standard tool set, which 
optimizes the organization and tracking of data, assists in the deconfliction 
of plans, minimizes the time required to execute the plan, and supports 
sustaining operations in the event of a continuity of operations contmgency . 

OSD has a functional requirement for a management tool that can 
help the staff meet their goals by serving as a basis for building a mumal 
understanding, and exchanging information between the varied groups 
involved in continuity of operations planning. These stakeholders mclude 
the professional continuity of operations planners, extra-duty organizational 
staff planners, principals, the Crisis Coordination Center, and the 
managemem and staff responsible for sustaining operations at alternate 
locations. To meet this requirement, this report documents the functtonal 
requirements and critically reviews the leading commercial software. A 
recommendation on which tool best meets the OSD functional requirements 
is provided. 

There are a number of available, commercial off the shelf, 
emergency managemem software products which offer the government the 
potential to quickly implement a tool to support its needs without fimding a 
major system development effort. Commercial software has the potential to 
significanUy reduce the cost of acquiring and implementing a management 
tool to support the continuity of operations process. The Defense Finance 
and Accounting Service (DFAS) recently pursued this approach to select and 
implement software for its own continuity planning efforts. 

This document accomplishes several tasks in preparation for 
acquisition of a management utility. The issues surrounding implementation 
and application of the management utility are addressed and bounded m 
terms of time and resources required. Alternative approaches to these tasks 
are proposed. 

The Strohl Systems product is the best of its class. It meets all 
established ftmctional requirements, provides a high degree of security, and 
provides the flexibility required to meet the emerging needs of the commuity 
of operations planning community. Priced below twenty-five thousand 
dollars for a local area network application with unlimited client licenses, it 
meets contracting requirements for a small purchase order. 
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Introduction 

Document Overview 



This document identifies and describes the fimctional requirements 
for acquiring a continuity of operations software tool. This document is 
divided into the following areas: 

• Section 1 provides an overview of the document and some 
background on OSD continuity of operations plannmg and 
management processes. This section summarizes the objectives 
for the management processes, and discusses existing procedures. 
Proposed methods are outlines, emphasizing the systems 
components and architectures required to achieve OSD goals. 

. Section 2 provides a description of the objective management 
utility-which is a software tool which assists contmuity of 
operations planners and managers organize, track and share their 
important data and documents. Objectives for the software are 
detailed, as are existing and proposed business procedures. 

• Section 3 describes the detailed characteristics and performance 
measures for a continuity of operations management utility. 

. Section 4 outlines the operating environment for the continuity of 
operations software tool. It begins with a review of the baselme 
assumptions and constraints, followed by a summary of the 
information technology environment which supports contmuity ot 
operations plamiers and managers. Systems requirements are also 
discussed. 

• Section 5 provides the recommended software and discussed 
application and implementation issues. A general cost estmiate is 
included. 

. The appendices contain the evaluation and ratings matrices, and 
acronyms listing. 
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The OSD Continuity of Operations Plan and related efforts, to 
include this software evaluation study, are guided by the following 
authorities and publications. 

1. Executive Order (EO) 12656, Assignment of Emergency 
Preparedness Responsibilities. ^^^t>x n r 

2. DoD Directive 3020.26, Continuity of Operations (COOP) Policy 
and Planning, May 1995. 
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Benefits 
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DoD Directive 3020.26:?, Office of the Secretary of Defense 
Continuity of Operations Plan (Va^ard) (U) Interim Plan, 6 
December 1996. " 

Pentagon Renovation Program: Technical Report for Pentagon 
Renovation Telecommunications Architecmre, August 1993. 
OUSD(P) Decision Support Architecture Implementation Plan, 30 
Nov 93. 

"Software Package Selection and Evaluation," David M. Clark, 
The Handbook of IS Management . 3"* edition, 1991, Auerbach 
Publishers. 



In 1986, DoD developed a series of continuity of operations plans 
that were designed to enable the U.S. Government and Departments to 
conduct operations during an attack agamst the Contmental United States. 
In February of 1995, the Assistant to the President for National Security 
Affairs forwarded a memorandum to the Secretary of Defense revalidating 
the requirement to provide Continuity of Operations (COOP) for the Federal 
Departments to be able to respond against the more diverse type of threats 
currently facing the U.S. Government such as the Oklahoma City federal 
building and New York City World Trade Center bombings. The 
memorandum stated it was the policy of the Administration that continuity of 
operations plans should address all-hazard emergencies such as namral 
disasters, military attacks, terrorist incidents, and technological emergencies 
that threaten the national security. 

As a result, OUSD(P) is in the process of updating the 1986 
continuity of operations plan for OSD and is working towards ensuring that 
the Pentagon-based headquarters continuity of operations plans can operate 
in an integrated fashion to support the Secretary. This effort to evaluate 
emergency management software directly supports OUSD(P) efforts to 
develop continuity of operations plans for OSD by providing an effective 
means to manage continuity of operations data and standardize planmng 
efforts throughout OSD.- 

Automated management processes and tools can help the Office of 
Emergency Planning to realize a number of benefits. The benefits listed 
below are general in nature, and result firom implementing a standard 
automation tool. As described m Proposed Methods and Procedures, 
specific additional functional improvements to the continuity of operations 
planning process may be developed after the implementation of a tool. As 
appropriate, these functional improvements will be documented m updates to 
the governing document, DoD Directive 3020.26-P, Office of the Secretary 
of Defense Continuity of Operations Plan (Vanguard) (U) Interim Plan, 6 
December 1996. 
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• Improved communication within the COOP community. "Gaps" 
■ and conflicts within individual plain will be easier to identify and 

correct. 

• Enhanced and simplified access to COOP plans by all those who 
are affected, including principals, staffers, support organizations, 
and the primary and alternate work locations. 

• Meets the OSD requirement for community wide continuity of 
operations plans to enhance interoperability, oversight, and 
management in the case of an emergency. 

• Enhanced access to accurate, reliable, and timely information. 
Automated processes provide a standardized format with a 
uniform level of detail and standard data elements. 

• Conelation of multiple types of emergency plans against different 
contingencies. 

• Reduced cost to implement and sustain the program, as measured 
by the number of people required to develop and maintain 
continuity plans for all affected organizations. 

Summary of Functional! The OSD continuity of operations plamiing requirements are divided 

Requirements into five groups; three of these groups represent user requirements. The last 
two groups represent requirements for the system and the operating 
environment. 

• Assist the various OSD components in plan development and 
management. 

• Support components and specific organizations such as the COOP 
Response Cell in executing the OSD plan. 

• Support OUSD(P)PS/EP in meeting its continuity of operations 
training, exercise, and oversight functions. 

• Be interoperable with the major software in use within OSD, 
including Microsoft Office and Exchange and Lotus Notes. Be 
capable of cross-platform usage. Provide for electronic mail and 
enterprise-wide messaging using TCP/IP. 
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Be based on an open systems architecture that does not limit 
future expansion of the"system, including developments in 
software and hardware. 



System Summary - 

Background it is envisioned that the utility will assist continuity of operations 

planners to plan for and execute relocation plans during contingencies. It is 
not the primary tool for OSD components to use to execute their mission 
essential tasks, such as to develop policy or prosecute war at their relocation 
sites. Other management systems, office productivity suites, and messaging 
platforms required to support these tasks need to be available at the 
relocation sites. However, data stored in the utility may provide indirect 
support to executing mission essential tasks. 

The initial use of the management and planning utility is limited to 
OSD and its component organizations. Beyond OSD and its alternate sites, 
a fumre consideration is to expand implementation of such a software-based 
system to the Services, Joint Staff, Defense Agencies, and CINCs to support 
their continuity of operations planning efforts. 

Tools developed for use by continuity planners should fit into the 
longer term strategy ±at takes advantage of Internet/Intranet technology to 
integrate the community into a vimial office. As such, the selection of 
emergency management software should be compatible with network 
throughout the continuity of operations community. 

Objectives Continuity of operations planners must prepare for a variety of 

emergency contingencies. Each simation presents a set of challenges which 
are both common to all contingencies, and unique to the specific challenge. 
The utility should assist planners in executing those tasks which are common 
to all contingencies, taking into account the unique requirements of each 
emergency simation. The utility should assist OSD planners in navigating 
the requirements and individual decisions of a specific contingency, and 
accomplishing the following objectives. 

• Standardize OSD continuity of operations plans using templates 
customized to meet the functional requirements and 
nomenclature. 

• Support specific continuity of operations planning. The utility 
should support implementing and maintaining: 

- Rosters containing key personnel and critical data (such as 
telephone numbers, skill areas, Military Assistants). 

- SOPs and task lists. 

• - Staff augmentation requirements and plans. 

- Key documents inventories and reference material. 
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- Transportation plans. ^ 

- Reception plans at alternate locations, including security 
accreditation. 

- Required logistics and communications support at relocation 
facilities. 

- Security plans. 

- Plans for special support requirements. 

Support OSD continuity of operations plan execution by: 

- Providing the capability to merge key data from all OSD 
plans into a single database to support COOP Response Cell 
(CRC) activities. 

- Providing a utility to back up critical continuity of operations 
databases and information repositories. 

- Distributing critical continuity of operations databases and 
information repositories to relocation sites. 

- Enhancing the telephonic and electronic mail notification 
systems. 

- Supporting the transportation coordination process. 

- Supporting the security coordination process. 

- Enhancing the ability of the continuity of operations planning 
staff to provide ongoing support at the relocation sites. 

Support OUSD(P)/PS/EP management and oversight 
responsibilities through training and exercises designed to 
validate continuity of operations plans. 

The utility must support the creation of standard and ad hoc 
reports from both the individual organizations plans, and the 
merged, OSD-wide plan. 

Support publication of continuity of operations documents that 
can be published electronically and in paper format. 

Support the continual process of deconflicting OSD continuity of 
operations plans. 

Enhance the ability of continuity of operations planners to 
distribute information to specified individuals and organizations 
throughout all phases of the planning and execution process. 
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Existing Methods 
and Procedures 



Ensure the OSD plan infcludes the continuity of operations plans 
for all subordinate organizations, including key information such 



as: 



- Relocation sites. 

- Key personnel and critical contact information. 

- Mission-essential functions. 

- Essential logistics and communications requirements at the 
relocation sites. 

- Transportation plans to and from the relocation sites. 

- Evacuation procedures. 

- Training and exercise schedules. 

- Alert and notification procedures. 

OUSD(P)'s effort to revise the OSD continuity of operations plan 
comes after a number of years in which diminishing resources and attention 
towards continuity of operations have had their effect. Many of the old 
processes and systems used to support the 1986 plan either no longer exist, 
have atrophied over the years, or become obsolete. As the new program 
continues to develop and mamre, processes and systems that will be required 
to support continuity of operations planning and execution are only now 
being identified, designed, and evaluated. 

In the few cases where processes have been identified and are being 
performed (at least to some extent), users currently resort to using tools 
easily available or familiar to support them in performing their tasks. 
However, these tools are not necessarily best suited to perform the task. 
Furthermore, many processes are not yet developed to the point where 
integration oppormnities can be exploited. For example, planners use 
existing word processing tools to develop texmal data such as plans. 
However, these plans are generally stored at the local user level. Others 
are unable to view or share this information since networking and 
communications capabilities are not yet incorporated into the process. 
Similarly, lists of information that must be maintained, such as a relocation 
roster, are maintained using tools of the user's preference. The range of 
formats includes paper lists, database, or spreadsheet applications. Where 
information must be shared or distributed, such as a roster list, it is 
generally done via paper copies over fax machines. In some cases, the same 
information is maintained in various formats in different organizations. 

In short, existing methods and procedures are in an evolutionary 
state. What is known is that users require the capability to write and store 
texmal infonnation, utilize database technology to store and manipulate data 
elements, and, through computer and communication technology, be able to 
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inteerate Deople and informaaon across the continuity of operations 
"ZS AS OSD proceeds witi. its series sf exercises to evaluate the 
ovSpto the methods and procedures wUl take furtlier shape Any 
softie uSiity considered to support the process must be flexible enough to 
deal with this changing state. 

Proposed Methods! Information systems planning is a sttategic and tedpUnod W"acl. 

and Procedures ,« determining the most efficient and effecnve means of «^i » 

' organizations information requirements. The tradmonal approach ote 
Dtanmg is to analyze the mission and function to be performed, detennme 
w^^fforr^ the Lction, identify Ure informadon and data required to 
^rfo™ Ae function, and then to define the automated processes needed to 
Structure and display the information. 

The methodology used to define the functional requirements for die 
continuity of operations process follows this discipline, but stops after the 
mSn Ind functions have been analyzed. Completing diis task mvolves 
deS what information is necessary, how plamiers will collect the data 
anS r.y will share that information. Hiis report descnbes the general 
blrrexpected to be accrued from the use of an automation tool, rather 
Sfscreet fimctional improvements, given the insertion of a specific 
technology. 

Soecifically defining how the tool wUl support the contmuity of 
operatio.^ plamiing process, is a dynamic process that wiU change as 
functional improvements are identified and miplemented. The 
Cementation of a software tool to assist the plamung process and Ae 
moment of a continuity of operations contingency is one step m the 
functional improvement process. 

Defining improved methods and procedures will be a result of using 
the tool not simply the implementation of the automated planmng utility. 
™xTrc s7^^^^^ continuity of operations plamiers use the software 
friui result in lessons learned, which can then be applied as process 
improvements. 

Rigorously defining objectives and functional requirements for the 
software utility will drive the choice of a tool towards an open, flexible 
s^^m Jelnces the opportunities for future process -provem^ts. 
Most of the vendor products reviewed do not meet these criteria The 
tlndor sd ction process used here avoids vendor P-Pf 
which limit future enhancements. Tliis should ensure the — f ^^^^^^^^ 
of the system to meet the dynamic information requirements of OSD. 
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Detailed I 
Characteristics 

Approach 



The functional requirements that describe the OSD continuity of 
onerations software were developed by combining several different 

Tliis included evaluating market leading software, surveying 
S fX 1 government implementations of -ntinuity of operatio^ t^^^^^ 
and a Lramre review. Software vendors demonstrated their tools and/or 
dtussSr business models. This process culminated m the realization 
Se OSD functional requirements are different DFAS or other, typical 
users of this type of software. The major differences include: 

. OSD focuses on crisis management rather than business recovery. 
Further, OSD must selectively manage priorities that ensure the 
ability to achieve continuity of essential functions. 

• OSD Planning requirements and formats are unique within the 
operations community. When a continuity of operauons 

emergency occurs, the OSD principals may be anyv^here m the 
world, the alternate support locations may vary, f^^ft^^^^^^ 
for support may vary. Further, there is no acceptable down tune 
to provWing OSD support to national defense and security processes. 
This immediacy of need and degree of variability sets these 
requirements apart from other organizations. 

• Nomenclature and language differences. 

. The OSD environment is multi-tiered and multi-organizational. 
Deconfliction of plans, schedules, and assets is a major task. 

. The OSD requires the tool to provide information to support decision 
making in a fluid and complex enviromnent. This dictates rn^^^ 
Se ctoracteristics of a Decision Support Tool (DST), as well as an 
organized and structured planning tool. 



Functional 
Requirements 



This section describes the various continuity of operations 
manaeement requirements from the user perspective. Users may be 
roS pi Jers. individuals covered in the plan, or other stakeholders m 
the process or involved in the infonnation stored m the utility. 

While the management utility must operate with many points of data 
entry there are detailed business niles regarding the visibility of data 
Organizations may or may not be allowed a view all or part of another 
or?So"pZ Reg^dless of the stams of business rtiles, changes m 
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one plaifmay require corresponding changes ia other organization's plan. 
The utility must allow for this occurrence while maintaining overall security. 

The following paragraphs describe the fimctional requirements of 
continuity of operations planners. 

Information Security 

Security is a significant issue throughout the conununity. The utility 
must operate in a SECRET-High environment, and meet the C2 
requirements established by the National Security Agency. 

The OSD organization works on a variety of Departmental LANs, 
which are all within a closed system, ensuring security. User access is 
password-protected, with additional security implemented through 
workgroup membership. Business rules allow or prevent individuals and/or 
workgroups from accessing different data sets. 

Works with existing office productivity software. 

Continuity of operations planners function within the general 
environment of the Office of the Secretary of Defense. Continuity of 
operations is an additional duty for most planners. A management utility 
that seamlessly integrates with standard office productivity software is 
optimal for these individuals. In general, Microsoft Office is the standard 
suite of desktop software. However, there are areas where Loms products 
are used and several pockets of Macintosh users. The utility must also 
interface with the non-standard office software. 

Windows compatible 

Most users in OSD are standardized on the Windows interface, and 
many use Windows 95. However, telecomputing users cannot be expected 
to have state-of-the-market automation, so the utility must not require system 
resources greater than a 486 class machine. 

In general, OSD users run applications on the desktop machine, 
while the data resides on the server. The Local Area Network uses TCP/IP, 
and is migrating from standard, class five cabling to fiber optics. LANs are 
multi-segmented using routers. 



Compatible with existing E-MaU'and wide-area data communications 
capabilities 

The utility must be compatible with the various electronic mail 
packages in use within the Department of Defense. Users have many 
oppormnities to share files and documents from continuity of operations 
planning, and generally do so by attaching them to E-Mail messages. In 
addition planners are required to update their plans and databases regularly 
when there are changes or updates to other plans. These updates can best be 
handled by automating the updating process. 

In the event of an emergency, these planners must notify a significant 
number of individuals and locations. This can best be achieved through an 
automated process that uses data stored in die management utility and access 
to local and long-distance unclassified telephone lines, electronic-mail, and 
secure telecommunications. 

Flexible database capabilities 

Continuity of operations planners must maintain lists of many data 
items Examples of the range of data required to be kept are die names, 
addresses, and phone numbers of all individuals who require notification m 
die event of a contingency to die logistical stams and inventory of items at 
alternate locations. These data elements must be cross-referenced and sorted 
using simple to complex filters. Multiple users must be able to view and 
update diese lists. Finally, diere are many reports, bodi tabular and graphic 
diat must be generated from diese lists. 

Supports project management software 

Executing a continuity plan is a multi-step process diat involves many 
individuals and organizations. As such, current workflow concepts and 
utilities can be used to ensure all users are aware of die status of dieu- and 
odier organizations execution of die continuity plan. Planners often work 
from standing operating procedures (SOPs), which must be captured in die 
utility. During die execution of an emergency plan, diese SOPs are used to 
organize die actions taken to achieve die overall goal of continuity of 
operations. These SOPs are generally templates, which can be shared 
between organizations. 

Supports electronic library capabilities 

In addition to die data stored in lists, continuity planners must 
maintain many documents diat pertain to dieir organizations. These 
documents range in size from simple, one-page information papers to books 
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with embedded graphics. Beyond text, there i& a requirement to store audio 
and pictures. 

Internet/Intranet capabilities 

Several factors drive the requirement that continuity of operations 
planners be able to function in a virtual office configuration. Telecomputing 
is increasing throughout the DoD, and there is reason to believe that an 
emergency contingency will occur during normal-duty hours when planners 
have access to their desktops. The plan must be executable at any time of 
day, from any location. This drives a requirement for remote access by 
planners and anyone that needs the information stored in the utility. 

Management and testing 

By directive the OUSD(P)/PS/EP has the requirement to oversee the 
continuity of operations planning system. This is both a policy requirement 
and an operational requirement. OUSD(P), the Office of Emergency 
Planning must develop policies and instructions that govern continuity of 
operations planning, as well as provide the operational capability to execute 
the process. The management utility must support both these functions. 
The utility must have the ability to integrate subordinate organizations* 
plans. This supports oversight since it makes plans inspectable. Further, 
the management utility must support testing the planning process through 
acmal exercises and simulations. 
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Environment 

Assumptions and 
Constraints 



System Support 
Organization 



The set of assumptions that apply to the technical implementation of 
continuity of operations software are generally consistent with the Pentagon 
renovation plan. Since the "normal" duty location for most continuity of 
operations planners and individuals affected by the plans is the Pentagon, the 
mformation technology initiatives in the renovation plan will significantly 
impact on their use of the system. The renovation will cause some 
temporary disruption due to office relocations, but there are no issues which 
will require significant changes to continuity of operations planning. The 
following assumptions from the Pentagon Renovation Plan illustrate this 
point. 

• User access and bandwidth on demand requirements will range from 
less than 100 Mbps to more than 1 Gbps. 

• Secret, Top Secret, and SCI classified communications over 
individual fiber optic strands can coexist in the same multi-strand 
fiber optic cable. 

• Multi-Level Security (MLS) will mature as a technology and become 
an integral element of users' future applications systems and 
networks. 

• Value-added applications and services such as the Defense Messaging 
System (DMS) and office automation servers will evolve in the fiimre 
to be common user services in the Pentagon. 

• Technical control facilities, command centers, and operations centers 
will be simated in the renovated basement and mezzanine, resulting 
in high concentrations of classified telecommunications and 
requirements in these areas. 

Any software tool implemented by OUSD(P)PS/EP wUl be supported 
by the OUSD(P)/Policy Support Division. This organization operates the 
OUSD(P) Network, commonly known as the POLYNET. This is a secure 
automated information system that provides the enterprise-wide network 
architecnire for the 1,100-plus OUSD(P) staffers. 

The POLYNET operates out of the Operations Control Center 
(OCC). and is staffed by a combination of OUSD(P) military and civilian 
employees. Pentagon Single Agency Manager employees, and contractor 
support. This organization provides full interoperability at the workgroup 
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I... 



Equipment 



Support Software 



and enterprise level for all OSD usprs, regardl^ess of hardware and software 
configurations. 

The POLYNET decision support infrastructure is capable of 
facilitating electronic conununication, both E-Mail and file transfer fault 

connectivity, and multiple levels of s-unty Jhis is the 
foundation upon which the OSD user and workgroup tools are built to 
facilitate OUSD(P)'s decision making and support roles. 

The POLYNET operates a diverse set of hardware to support the 
ranee of workgroup and individual user functional requirements. In 
suS^^'e are no stnictural limitations to the choice of a software tool 
attributable to the on-hand equipment in OUSD(P). 

. The POLYNET supports end-uses working on the Intel/Windows 
PCs, as well as Macintosh and SUN workstations rtinnmg Unix 
variants. 

Remote access is achieved through both dial-m usmg 
communications servers and LAN-to-LAN access Secure access 
is achieved through both STU-ffl and Motorola Network 
Encryption Services (NES). 

SIPRNET access is achieved by connection to the secure routers. 
Backbone services are provided by an FDDI ring. 
Optical disk servers provide one type of on-line infonnation 
repository made up of multiple CD-ROMs. 
• A variety of scanners are in use across OUSD(P). 

The POLYNET operates a diverse set of software to support the 
range of workgroup and individual user functional requirements. In 
smeary the selection of COTS software to support contmuity of 
o^t^ni plamiing will be supportable by the POLYNET. At the same 
Some iSidual users, most likely users with SUN workstations, may 
experience some challenge in using the tool. 

. PC-based workgroup LAN comiectivity is provided by NoveU's 
Netware 4.1. SUN workgroups use Solaris or the SUN OS. 
Macintosh workgroups are supported with Appleshare, NH>. 
. The most wide-spread end user office productivity suite is 
Microsoft Office. Unfortunately, not all COTS end-user 
applications are interoperable at this time. For example, 
Microsoft's word processor Word is interoperable between the 
imel-based and Macintosh platfonns. However. Unix users use 
Aster*X. 
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Communications 



Failure Contingencies 



Security 



System (CHAIRS). 

do no. limi. *e choice of a -'^'fV^^'^^Z^TZ co.^-^ of 
pon to die cteified Pentagon can access Ute 

prions tool. Organuations P^'LTOErDial-in connectivity 

syU through a <iia';» ^ ty^^^o ulporarily away 
also provides acc ssmte ^^or^ J^^^^^^ 

p-'^- " 

communications challenges that may arise. 

Tu oni VKFT has a robust Uninterruptable Power Supply (UPS) 
.apa^wSr^^l^™^^ 

'^»erJlS~o^~^ 
the systems. 

M dte continuity of operations ^"oT^u of dte 

.eplicated at an — .^^s si^ « -tinuity of 

^^^Ct^S'^rirhSre contingency 

procedures. 

The POLYNET operates as a I>;P~:„^,trs:worSt 
networlc. AU users of the — ^ ° ^ X " 

— s^^ra^c^rs--^ 

of all data storage media. 
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System 
Development Plan 

Commercial Off 
The Shelf (COTS) 
Software Vendors 
and Products 



contingencies -^f ^^^^^^^^^^ has been a two step 

requirements. The selection or ve ^ ini^ai screening 

process, initial screening and ^e^^Ue^ mv^^^^^ ^^^^^^^ 

Lluded a wide ^^J^^y^J^^^^^^^^^ Ir this community include 
recovery conununity. The P^""^"^ ^^^^^^^ 
DisasteLRecover^^ 

U,e focus of the vendo. Many or track 

evaluate business nsk. "^f^P^^ are considered "Business 
insurance informatton^ ^^''"ISnnnuni.y, but are not one of 
Analysis- issues ui the disaster eliminated many potential 

OSD's functional requirements. This focus eiinunai 

vendors and products. 

The detailed investigation, — «f " 
with Uie vendor was limi^ to the four F^-'^^^'^f^'^^" „view. 
systems product « "^^^ revaluatelfor DFAS, but it did not 

An earUer ™ ^^^^,Xr two vendors were not reviewed by 

perform as well as StroM. ine omei^ ^ 

'dFAS; however. U,eUextensi«a«^er l«Ba^st«n^^^^^^ 

:s^;trrrr^?aX»rmS:.-s:sa. 

OSD'S functional requirements. 

. strohl Systems' LRDPS, V8.0.4 

• SunGard's CBR, v2.0 
. Recovery Management's REXSYS, v4.2 

• COMDISCO's ComPAS, V3.2.0 
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Summary Of 
Evaluation 
Comparison 



Th. flexibility of the software tool to meet dynamic requirement has 
The °' user-oriented functional requirement for the 

emerged as the most important, user o"^"^ ^ jheir 

tool-'lhe clear leader in this ^^^^^^^^^ field 

product suppons generating ad hoc user defmed^r^ , 

Us. and a«^- - ^^;rt\rrthat Strohl's lead in 

rSea^a" ^^^^^^^ -ith JfAS. where there was a similar 

requirement. 

operadom plan. ^ "t*l^^v^«g^ mTw^k done for DFAS 

such as REXSYS have a lunited database capaDUiiy, an 
flexibility issue as great a priority as Strohl. 

such as the POLYNEl . Agam, ^" nrovides the ability to 

capabili* agata sets U.em apar. from the other vendors. 

•^'f % rEe^'r^^raT^r— of^^-*- manger for 

s^^n.'isrtorer .s::;?^:?:-^^^^^ da. stor^ w^th. 

±e system. 



Functiona 
Requirements Matrix 



The functional requirements !^ ""^S^.'S^^^l^" 
used in this evaluation are descnbed. 
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Application Issues 



DoD Instruction wiv.i, ruii^.v 



Define 



Objectives, 
Strategies & 
Baselines 





Analyze 


Evaluate 




Functional 
Processes 




Alternatives 



New Processes, 
Data & Systems 





Proposed 
Changes 




Implementation 




Approve 


Plan 



Execute 

Given the existing — ^.^S^^Sn^U — »ol that 
operations 

. The definition phase has been completed. 

. Ft^ciona. requirements have been analyzed, but worK processes 
have not been described. 

methodology to improve continuity of operations 
• The proposed methodology ^" f . : support tool. 

and rejected. 

• • ct.n« develooing an implementation plan, 
. The remaimng steps, f ^^^^""^^^^ f and 

S'^eSnrS-lirrttOSOsoalsand 
objectives are: 
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will mey be combined to support execution control by the 

n«n nirectives and Instructions. What otner 

library? Should it be a '»* "^"^X^t «, 
OSD organizations which deploy to aitemdu 
perform continuity of oV^r.noM^r^^^^^ ^^^^ 
What reports must be generated by the software 
OSD's oversight requirements? 

The incomplete steps are f^^^^:^-^^.^^^: 
They should be completed, « « '»'^tirton o°a technology ^ meets 
However. Utere is 'O'^"^^^ is flexible, and is based on 

d,e defined functional . ^°^iity of achieving the benefits 

an open systems ^° p^cess that takes this fact 

described earlier. An W'-" "o" development process is 

i„,o account, and r 1' °' „ development process that 

;S^Sdi:ror:;=-s:S-n.annerisappropriate. 

,„ applications development. capabiHti^ can J^^fan 
alone modtSL which are -1-'^°,^ ^;rj p,^^^^^^ Z sequentially 
ten be prioritized by ^^^T """^s^ Tthis m Jer. enhanced . 
developed and put mto use for This supports a dynamic 

capabilities are quicldy put to ^ f^j „ » joiit team of 

-discovery- of die conect »PP^f *4^m tor L tool are defined, 
developers and users. ""/"^J'^jl^P^^^^s can be modified. If the 

•r^.Set:crp=^^ - — 

Tbe range <>^^^t'rrZ'::^y^^^-'- 
r e— ^ rrsSn?^^— -es. addresses th. area. 
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Implementation 
Issues 



♦«»;«n «rheme would follow some 
overall, a general f^-^^IZ courses of action vary m 
variation on the steps listed ^ ^ implementation plan. 

C^S:S'tn - — t^ ana resources avaUahle, 

and the focus of management. 

. Determine appUca.ion d.ve.^««J^sW.^J^^^^^ 

appUcations. In this ^KP. >PP"«'^^" How users will use 
Jl'integrated into U;e ™/£"„es le^ unresolved ftom 

tt,e tool is 5P=''fi""5' '''„'^"J!fmito aPPto"°» """"P"""' 

following are decided: 

. Will al, user conununities^e^ve me tool at 0^ 

i, be deployed one o'^a— „ „mpleted 

. ro:=V-frwtsirr^uitr»" 

part of initial deployment, or will it oe a c p 

added later? „^«mr.iiched'> There are many 

_ How will initial data ^t^- ««mphshrf. J ^^^^^^^ 

data sources, soch as P"^"' "^^IZ ,i the amount 
which are available 'to™f^°« f »j ^an ^ 

„, work required ^J^^^^^no,. re,»i«d wim 
sources be a««sed. .s Aa^y ^^^^y ftom the 

rrrisXa^^"-^^"'^'^''"'^*""'"" 

J J Th, nhiective of the modeling phase 
. Model activiUes and data^^ob^e ^^^^^ 

is to build an <«^«^r^^ ^ tow data requirements are 
people work wiflun the P«^^; ^ „f ^^^^ and 
Lt. Analysts imemewuseK-orgroupio^^^^^ j^ 

graphically depict the f P^^'^^f^^ ^^^^ ^e^ripdon of 
program and data requirements. 

. Acquire software and ^'Vt^l^e S« 

Technical issues such as ".^^connectivity 
POLYNET, implemennng dial-ra ano remui 
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opu„„s. ana — i"^"rs::orrnc;^^ 

phase. Since technical ^^^^^'v^'^^^^j..^^ to implement, not 
Requirements, the challenge ^ Jie functional 

decide on the validity of ,,ieian^ to implement, 

decision has been made, it is up 

. • thic u a technical issue and few 
customize «.tt«are^ will be customized to meet 

decisions are required. T^e son customization, and 

fl,e functional "cwlirdescribed are outputs of 

how the customization .s tectoira^ Changes must be 

decisions made in "^^f^f^Xtional requirements. 

_ Design ad hoc reports. 

Add or delete fields in databases. 

- T,:. "V are used to meet the funcuona, 
. Sv^S'tTustomizedtrainingprogramforOSDusers. 

.jminiorator. While die server 
. Select and train a 'J^'tT 'fSS^ET enviromnent, acmal 
database will reside withm ^ office widi 

supervision of die " '^^^ of operations plans, 
fut^tional respcnsibihty Juability to the system, 

This individual will a-tamsn^e user a ^^^^^^ 
Mtauin the databa« and all fining is 

sustainmem tXlsTe^Snistrator. This indi«dual 
often an extra duty for ^'^fXare, understand die remo e 
must be highly tramed m ""I ^owrare. ^^^ledgeable of 
access, LAN and WAN ^^"^^^'^.^.ss. Over the long 
a,e continuity of '"'"^f^^^re fuU time manning. 

. BHerse.ec.ed«.d.,.s.rson*^»^-^^^ 

getting end-users to use ^^J^'^^ ^„ ^ directed to use 

The focus can l» °" J^,^ „ol will help users 
Su^rSre^eandefficientmea... 
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Course of Action #1 , , 
Rapid Fielding 



objecuve of *U testing is to^ *^-—S^^ 
■ I^sflei the general user co»..^^ ^^^ „ 
period are incorporated in *' »f - approach, rather 

development process. 

A K.ain selected implementation of the tool. 

SSfSby-accontplisheduser. 

Sesyste.nou.puts. 

«s*he,^ceU«.^^^^^^^^ 

approach are strong help """^^^^^'^^roup meetings to di«uss or 
^implementation phase, andtaquent me 

^ *i 



Course of Action #2, 
Model-Based 
Development 



ize mc — 

^ opposite approach. ""^"^^ '^^Sn » "J'"* 
controlled, incremental '"""^'.^^JX^ customizing the software 
c^nunuity of operations acuviues and "^i?' ac^ follows model- 

the environment. 

, ^hnitiue *h rX^^r^TafofS 
approach is that changes to the software 



Additional Courses 
of Action 



implementauon of the '»f^"';,,^™T"lu, level. This reduces the 
3 at the model level. outputs rich in information 

Reliance on the <«*f ^ *ls ^oS"^ ™" "^'^'^ 

^^^^.Ceran:^.""'^— ^ 

.dditionalcoursesof ac.onc.hec— ^^^^^^^^^ 
^ allotting time to different pte^ ^^^SaPP^^h. In summary, the 

U.r involvement. Can — ^^-X'^'- 
of user involvement early m ^„een the users 

approach requires a great dealof "^^^'^^i^ent, as well as 
Z the development «"L^^,7C approach, initial user 
e,e sacrifice of time. In "'^'^n Jerts, who help buUd 
involvement is limited to l^Z!'^^'^^^ members of 
U,e model. Additional u^« ate as P ^ 

S:rS^-ta\;rUitmentof^ 
to model-based approach. 

n« the benefits of immediate fielding 
Speed of implementauon. Do *e beMtits ^ 

'^uncustomized, »ft«"' ""^'jg" f^^diate fielding is 
requirements and ^'^^'^S^e, customizing the tool to 

important, developmem -^ ^^^-^ disadvantage to this 
respond to recognized needs. .T^' ° complicated. It is 
approach is that it makes version comtol ^ u^ers 
Z difficult to control cu— ^n m to ^ 

X^Uon process has been applied. 



The products of the implementation phase. 



,„ die rapid -P—^^P^h^pe^f.^^^^^ " 
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how the system works. 

awSonft-ncdons has been prepared. 

A IBDPS is the Clear leader in the 

Beco— onsj -^^^^^^^ 

T^r&^B^^^^'^^^T. at. 
Enhancements P^sr^t^^^^^e^rise-scale databa«s like Oracle, and 

r^Se^r:::::rSs^^lsn»>vh,..d>esan,e..nre 

direction as OSD. shows 

The functional '"■--"^^'^^^S^^^^^^ 
U,at Strohl is d.e clear ^-"^S "torS lf*. Using a weighted 
its closest competitor. REXSYS score ^ twenty-e ght 

'^e with possible ^''^^^^"'^ ' '"l^Tto^ P«haps most teUmg. ^ 
times REXSYS scored a 10 only ''Snte Appendix A, the 

r forty-six items in the ^ction^ r^^»»^^^ «,„„o,es indicatitig a 
■^^ohlTroduc. "let all requi^^^^^^ „guUrly. 

rat're'rwS:?:und^beless.hansatisfactory. 

Strohl was die only Ptoduct^'r^'Si^""^^^^^ . 
requirements. The other O""^^'"^ Xo „eet odier critical foncnonal 
levels for each menu item. Strohl wasame ^ g^U 

:;tirLnts. such as die f^^^^^''^ ^ products eiUier 
^ in die datatoe '^™'°'S»re. or had no plans, 

planned to add these capabilities m me 

implementation costs. 

The model-based •''^^^^^^^^Sr^^^^lT 
implements die planning ^^^f^ Z evoludonary state, a« nlode^ 

processes. Since ™rf^ ewLg processes before automatmg d«m- 
Uappr^h^^;^ubyre^^^^^^ 

This supports attaming mc attaming the expectea dc 

software, and provides ^Benefits such as "improved 

of automating the planmng process, ue 



automating them. 



Cost Analysis ' 



• Hardware 

• Software 

• Configuration 
Testing and training 



no cost 
$23,990 
21 man months 
•included in configuration 



• ICStUig - 

reside leveraged on current auto-™™" will support d-c =Uen. 

"Quired. In place "">Pr.fb^,°1?«sW: on the POLYNET database 
application. The ^f"«"Jd om during implementation planning. 
-rare^:r;;:rarr^short.allsorconnic.s. 

---^rrer'rrj^^^^^^^^ 

S23 990. This provides the server 

the activities and data that 
Confilura,ion costs. The » "^^^^ fte customization of 

approach. 

. customizationcosts. ^^^^^^^ZTZ'Z^'^ 
continually refined to '^^ Me of the project. A sa 

wo programmers toou^" *«^>^ ^^ve man 
month implementation f ""T* ^tomization is estimated 
months. 1» .he model WW^^"^ of f setdng <h.s 

o«t This cost represents the work 
. Configuration management. 

accomplished to get the m^^^^^^^ 
rumiing in the hands of the J^ from legacy 

in either course of action. 
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sp«mc>erii tor «sung allots aone »eck penod for 

Se o the system. --""i^f j^f^f a man month. I»add.uon. 



A sample project schedule is includod. 

I ^nnth 2 1 



Up front analysis 

Modeling 
FoHow-up 
Observe exercise 

Acquire and configure software 

customize software 
Systems training at Strohl 

Tram on crystal Reports 

Test system 
Ttam system adminetrators 

Briel end users 
Prepare documentation 

Train end users 
capture lessons learned 




... . - •■•'5:^^!p5.^«?^'*«?^ 
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Appe».b< A. Functional R«.-i«"«-»^"'^ 



T contains m-aHv^i^;^^^f^^^!^---^ 

■ ^^^^^^^^ 
EncryptspasswordS; - 

anowsuserJto change own 

passwords 

TT. Providesacomprehensive up 

Manual. . srHTfoT" 

customization of text flies to a 

reportsandreporti^^ 




no groups 
rfpfined by user. 



SunGard T 

Y' 1 


REXSYSl 
Y^ 1 

1 1 


Y I 
T No [ 




J4o 




1 No 


■ No 1 


4 Y3 


No 1 



Strohl < 

3 Y r 

3 Y L 


^omPAS 

No 1 

' No J 


^ Y T 


Y _ 


J Y I 


_ No _ 


' ^ 1 


Poor Ops, no 
SA 


Y 


Y^ 


Y 


1 ^ 


Y 


T ^ 
1 Skhbe 


1 ^ 


i ^ 



REXSYS 



Y 

Word 



Poor. 

''Via Edit/Find. 

8 Use SQL syntax. i^jk as a reference. 

' If text files are attached to a lasK as 

'° Poor. 
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' reports are viewed on the screen. 

-Scrolling line-by-line 
-Scrolling screen-by-screen 

-Panningjef^^ 

19. Store, view, oi Word, Power 

their native format (i.e., wora, 
D»;nt F.xcel. etc.)^ 



-ComPAS I SunGard TrEXSY^ 



Vievtronly from 
Skribe 



rwinrtnwscoinintihle 

To. Operates using staiiUaidOSD office 

supports multiple concurrent users 
-Provides record loc^mg , 

area data conimumcations — — ^t,^ — 

' COOP planners throughout the OSD 

I the detailed exhibta^^ 
>ian execution. 



Strohl 

Y 




Exports to" 

T 



l:omPASISi2S2Ei 
Y ^ Y 



Exports to 




No 

Y . -T^^ 




No 

Other systems 

are not 
compatible with 
RAMA 



, . f„ be entered before exporting. 

;;;;j^ect, addiuonal .nfo must 

>3 Sc'^ only . not electronically. 

" Hardcopy "°;;Si;ect o a^^^^^^^ '^^^^^^^^ P"""* 
'5 Must purchase REX Collect to a 
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Flexible database capabilities 


Strohl 


ComPAS 


SunGard 


REXSYS 


27. Modify fieW names without vendor 
support 


Y 


Limited 


Y 


Limited 


28. Modify field length without vendor 
support 


Y 


No 


No 


No 


29. Add and/or delete fields without vendor 
support. 


Y 


No 


No 


No 


30. Ability to mark fields as "required". 


Y 


No 


No'" 


No 


31. Provides database management capabilities 
for information best presented in a list 
format (i.e., equipment inventories, 
j)ersonnel lists, vendor lists, etc.). 


Y 


No 


Y 


In development 


32. Uses "drop down" screen for selection of 
key fields to provide data input efficiency 
and data integrity. 


Y 


Limited 


Limited 


Limited 


33. Provides multi-key access to database 
information and reports. 


Y 


No 


Y 


Y 


34. Provides "memo" fields for certain 
database records allowing over 200 lines 
of text to be added per field. 


No^' 


Y 


Y 


Y 


35. Allows for a multi-tiered organization. 


Y 








36. Allows the user to find specific database 
records or browse the contents of all 
records in table format. 


Y 


No 


Y 


Y 


37. Allows the user to change the son 
sequence of records within the database 
files. 


Y 


No 


Y2. 


No" 



*^ Required fields are preset by vendor. 
Limited to 200 characters. Can insert object (doc) to desired record. 
Limited. 
Limited. 
Limited. 

Ascending/Descending option only. 
" Only in custom made DIS buttons. 
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Flexible database capabilities 


Strohl 


ComPAS 


SunGard 


REXSYS 


38. Contains a relational database management 
system thatwupport the generation of many 
user defined reports. Examples of these 
report include: 
-OSD Component file 
-Critical functions file 
-Personnel file 
-Security data file 
-Transportation file 
-Manifest (JEEP) file 
-Relocation staff file 
-Alternate relocation site 
-Alternate site equipment/supply 
requirements file 
-Emergency Procedures file 
-Training file 

-Crisis action procedures file 
-SOP file 
-Successor file 
-Coordination file 
-Special medical file 
-Critical documents file 
-Communication systems file 


Y 


No^^ 


No" 


No 






Supports project management software 


Strohl 


ComPAS 


SunGard 


REXSYS 


39. Provides a time and events schedule (i.e., 
Project Management System) that 
describes the various activities necessary 
to complete the planning process, allowing 
input of responsible party, start date, 
targeted completion date and applicable 
section of the Plan. 


Y 

Export hook to 
any project 
management 
software 


Y 

Export to MS 
Project 


Y 

Export to MS 
Project 


Y 



Supports electronic library capabilities 


Strohl 


ComPAS 


SunGard 


REXSYS 


40. Maintains an electronic library of key 
documents 


Y 


Y 

Docs are 
attached to 
individual plans 


Y 

Docs are 
attached to 
individual plans 


Y 



Database does not have thtf depth required to support these requirements. 
''Ibid 

Appendix A4 
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Management and testin 

42. Provides a flexible approach to developing 
an effective OSD plan 

43. Can be expanded to develop an 
organization-wide disaster recove 

44. Contains exercise schedules. 

45. Includes testing methods and procedures 
for: 

-Structured Walk-Through Testing 
-Checklist Testing 
-Simulation Testing 
-Integrated Testing 
-Parallel Testing 
-Tactical Testin 



Strohl 
Y 



Co m? AS 

No 

Proprietary DB 
limi ts flexibilit 

No 

"No 
No 



Su nGard 

No" 
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No 

.N^ 
No^' 



REXSYS 
Y 

Limited 

N^ 



df, Cnntains techniques for evaluation results. 

Completely meet the requirement in all respects (10 points). 

. Satisfies all but die most minor aspects of die requirement (8 to 9 pomts)_ 

. Generally satisfies die requirement but with some important aspects omitted (5 to 7 points). 

. Fails to meet most major aspects of die requirement (1 to 4 pomts). 

. Does not meet die requirement at all; diat is, die process or data structure is completely 

missing. 

« Can export to Access to get reqmred flexibility, but you lose the capabilities of the program when you do this. 

Database may limit flexibility. 
» £;tSs"ru„c. of .his in *. Help m.s.*u. docs prov^ 

Covered in the Online Methodology. 

"Ibid. 

Provides guidelines. 
«Ibid. 



m 



Appendix A-5 



Appendix B: Rating Scales 
Strohl Svstemg - LDRPS. v8.0.4 

Item Description 

1 Contains multiple levels of security. 

2 Contains user ID and password capability. 

3 Encrypts passwords. 

4 Provides a minimum length of six characters 
in the password field. 

5 Provides the capability to establish security 
levels for each menu item. 

6 Provides password security and protection 
controlled by the Systems Manager, and 
allows users to change their own passwords. 

7 Provides context sensitive help screens. 

8 Is flexible and easy to use. 

9 PC based and menu driven. 

10 Utilizes Query By Example (QBE) 

1 1 Provides a comprehensive Operations 
Manual. 

12 Uses word processing software for 
customization of text files to meet OSD 
requirements. 

13 Allows reports to be recorded in ASCII 
format for input into word processing or 
other software packages. 

14 Contains a comprehensive user report writer 
to allow for customized reports. 

1 5 Allows the user to select from a variety of 
reports and report sequences. 

16 Allows reports to by printed or viewed on 
the screen. 

17 Provides for the following functions when 
reports are viewed on the screen: -Scrolling 
line-by-iine -Scrolling screen-by-screen 

1 8 Includes a project management system. 

19 Store, view and edit key documents in their 
native format (i.e.. Word, Power Point, 
Excel, etc.) 

20 Operates using standard OSD office 
equipment. 

2 1 Is fully LAN compatible -Supports multiple 
concurrent users -Provides record locking - 
Includes user specific printer assignments 



Wei2ht X Evaluation = Score 



10 10 100 

10 10 100 

10 10 100 

9 9 81 

10 10 100 
4 4 16 

1 1 1 

1 1 1 

11 1 

9 9 81 

10 10 100 

10 8 80 

10 8 80 

10 10 100 

10 10 100 

4 10 40 

1 1 1 

2 0 0 
10 10 100 

10 10 100 

9 9 81 
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27 Modify field names without vendor support 

28 Modify field length without vendor support 



29 



33 
34 

35 



37 
38 



10 60 



Item Description WeigM x EvalHation = 

22 Includes backup and restore procedures. 4 4 10 

23 ShSre and transmit information to OSD - 10 ^ 10 100 
COOP planners throughout the OSD . 

community (import/export). 

24 Contains data gathering forms that tie to the 6 
detailed exhibits within the Plan. 

25 Communicate and transfer data to senior 10 10 100 
leadership at OSD relocation sites as well as 

other key government agencies. 

26 Link relocation roster data (name and phone 8 
numbers) to call notification systems used to 
notify relocatees of COOP plan execution. 



10 80 



10 10 100 

10 10 100 



10 10 100 



10 10 100 

..10 10 100 

Add and/or delete fields without vendor 10 10 100 

support. 

30 Ability to mark fields as "required". 

3 1 Provides database management capabilities 
for information best presented in a list 
format (i.e., equipment inventories, 
personnel lists, vendor lists, etc.). 

32 Uses "drop down" screen for selection of 
key fields to provide data input efficiency 
and data integrity. 

Provides multi-key access to database 8 10 80 

information and reports. 

Provides "memo" fields for certain database 4 0 0 

records allowing over 200 lines of text to be 

added per field. ri inn 

Allows for a multi-tiered organization. 10 10 100 

36 Allows the user to find specific database 8 10 80 

records or browse the contents of all records 
in table format. 

Allows the user to change the sort sequence 10 10 100 

of records within the database files. 

Contains a relational database management 10 10 100 

system that support the generation of many 
user defined reports. 

39 Provides a time and events schedule (i.e., 2 2 
Project Management System). 

40 Maintains an electronic library of key 10 10 100 

documents. 

4 1 Ability to link to an Intranet/HTML format 



0 0 
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• * „ Weight X Evaluation = Score 
Item Description 7;^ 

42 Provides a flexible approach to developing ^ 10 

an Effective OSD plan. * s 

43 Can be expanded to develop an - 9 
organization-vi^ide disaster recovery plan. 

44 Contains exercise schedules. 3 

45 Includes testing methods and procedures 3 

46 Contains techniques for evaluation results. 3 

Total 



10 


100 


10 


90 


5 


15 


5 


15 


5 


15 




3,118 
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8 Is flexible and easy to use. 




COMDISCO - rnmPAS. v3.2.0 

Item Description WSISM x Evaluation = 

1 Contains multiple levels of security. 10 7 

2 Contains user ID and password capability. 10 10 

3 Encrypts passwords. 10 10 

4 Provides a minimum length of six characters 9 0 

in the password field. 

5 Provides the capability to establish security 10 0 0 
levels for each menu item. 

6 Provides password security and protection 4 0 0 

controlled by the Systems Manager, and 
allows users to change their own passwords. 

7 Provides context sensitive help screens. 1 0 0 



1 0 0 



9 PC based and menu driven. 1 1 ^ 

10 Utilizes Query By Example (QBE) 9 0 0 

1 1 Provides a comprehensive Operations 10 5 50 
Manual. 

12 Uses word processing software for 
customization of text files to meet OSD 
requirements. 

13 Allows reports to be recorded in ASCII 
format for input into word processing or 
other software packages. 

14 Contains a comprehensive user report writer 
to allow for customized reports. 

15 Allows the user to select from a variety of 10 10 100 
reports and report sequences. 

16 Allows reports to by printed or viewed on 
the screen. 

17 Provides for the following functions when 
reports are viewed on the screen: -Scrolling 
line-by-line -Scrolling screen-by-screen - 
Panning left and right 

18 Includes a project management system. 

19 Store, view and edit key documents in their 10 7 70 
native format (i.e.. Word, Power Point, 

Excel, etc.) 



10 8 80 

10 8 80 

10 10 100 

10 100 

4 8 32 

1 1 1 

2 0 0 
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Ttem Description Weight x Evaluation 

20 Operates using standard OSD office : 10 10 

equipment. o si 

21 Is fully LAN compatible -Supports multiple 9 9 oi 

concurrent users -Provides record locking - 
Includes user specific printer assignments 

22 Includes backup and restore procedures. 4 0 0 

23 Share and transmit information to OSD 10 10 
COOP planners throughout the OSD 

community (import/export). 

24 Contains data gathering forms that tie to the 6 6 3b 

detailed exhibits within the Plan. 

25 Communicate and transfer data to senior 10 10 100 
leadership at OSD relocation sites as well as 

other key government agencies. 

26 Link relocation roster data (name and phone 8 0 0 
numbers) to call notification systems used to 

notify relocatees of COOP plan execution. 

27 Modify field names without vendor support 

28 Modify field length without vendor support 
29 



10 3 30 

10 0 0 



Add and/or delete fields without vendor 10 0 0 

support. - 

30 Ability to mark fields as "required". 10 0 u 

31 Provides database management capabilities 10 0 0 
for information best presented in a list 

format (i.e., equipment inventories, 
personnel lists, vendor Usts, etc.). 

32 Uses "drop down" screen for selection of 10 3 30 
key fields to provide data input efficiency 

and data integrity. 

33 Provides multi-key access to database 8 0 u 

information and reports. 

34 Provides "memo" fields for certain database 4 10 40 

records allowing over 200 lines of text to be 
added per field. 

35 Allows for a multi-tiered organization. 10 2 ^ 

36 Allows the user to find specific database 8 0 0 
records or browse the contents of all records 

in table format. 

37 Allows the user to change the sort sequence 10 0 U 

of records within the database files. 

38 Contains a relational database management 10 0 0 
system that support the generation of many 

user defined reports. 
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Item Description 

39 Provides a time and events schedule (i.e., 
Projtect Management System) 

40 Maintains an electronic library of key . 
documents 

4 1 Ability to link to an Intranet/HTML format 

42 Provides a flexible approach to developing 
an effective OSD plan. 

43 Can be expanded to develop an 
organization-wide disaster recovery plan. 

44 Contains exercise schedules. 

45 Includes testing methods and procedures 

46 Contains techniques for evaluation results. 



Total 



Weight X Evaluation = Score 



2 


2 


4 


10 


7 


70 


1 


0 


0 


10 


2 


20 


9 


0 


0 


3 


0 


0 


3 


0 


0 


3 


0 


0 



1,415 



SunGard 



> CBR. v2.0 



Item Description - 

1 Contains multiple levels of security. 

2 Contains user ID and password capability. 

3 Encrypts passwords. 

4 Provides a minimum length of six characters 
in the password field. 

5 Provides the capability to establish security 
levels for each menu item. 

6 Provides password security and protection 
controlled by the Systems Manager, and 
allows users to change their own passwords. 

7 Provides context sensitive help screens. 

8 Is flexible and easy to use. 

9 PC based and menu driven. 

10 Utilizes Query By Example (QBE) 

1 1 Provides a comprehensive Operations 
Manual. 

12 Uses word processing software for 
customization of text files to meet OSD 
requirements. 

13 Allows reports to be recorded in ASCII 
format for input into word processing or 
other software packages. 

14 Contains a comprehensive user report writer 
to allow for customized reports. 

15 Allows the user to select from a variety of 
reports and report sequences. 

16 Allows reports to by printed or viewed on 
the screen. 

17 Provides for the following functions when 
reports are viewed on the screen: -Scrolling 
line-by-line -Scrolling screen-by-screen - 
Panning left and right 

1 8 Includes a project management system. 

19 Store, view and edit key documents in their 
native format (i.e.. Word, Power Point, 
Excel, etc.) 

20 Operates using standard OSD office 
equipment. 

21 Is fully LAN compatible -Supports multiple 
concurrent users -Provides record locking - 
Includes user specific printer assignments 

22 Includes backup and restore procedures. 



Weight X Evaluation = Score 



10 7 70 

10 10 100 

10 0 0 

9 0 0 

10 0 0 
4 2 8 

1 1 1 

1 0 0 

1 10 10 

9 5 45 

10 5 50 

10 5 50 

10 8 80 

10 10 100 

10 10 100 

4 10 40 

1 10 10 

2 0 0 
10 7 70 

10 10 100 

9 10 90 

4 0 0 




Item Description Weight x Evaluation = 

23 Share and transmit information to OSD 10 10 
CQDP planners ihroughout the OSD : . 
community (import/export). 

24 Contains data gathering forms that tie to the 6 6 36 
detailed exhibits within the Plan. 

25 Communicate and transfer data to senior 10 10 100 
leadership at OSD relocation sites as well as 

other key government agencies. 

26 Link relocation roster data (name and phone -8 8 64 
numbers) to call notification systems used to 

notify relocatees of COOP plan execution. 

27 Modify field names without vendor support 10 10 100 

28 Modify field length without vendor support 10 0 0 

29 Add and/or delete fields without vendor 10 0 0 
support. 

30 Ability to mark fields as "required". 10 0 0 

31 Provides database management capabilities 10 10 100 
for information best presented in a list 

format (i.e., equipment inventories, 
personnel lists, vendor lists, etc.). 

32 Uses "drop down" screen for selection of key 10 3 30 
fields to provide data input efficiency and 

data integrity. 

33 Provides multi-key access to database 8 8 64 
information and reports. 

34 Provides "memo" fields for certain database 4 10 40 
records allowing over 200 lines of text to be 

added per field. 

35 Allows for a multi-tiered organization. 10 4 40 

36 Allows the user to find specific database 8 10 80 
records or browse the contents of all records 

in table format. 

37 Allows the user to change the sort sequence 10 6 60 
of records within the database files. 

38 Contains a relational database management 10 0 0 
system that support the generation of many 

user defined reports. 

39 Provides a time and events schedule (i.e., 2 2 4 
Project Management System) 

40 Maintains an electronic library of key 10 7 70 
documents 

41 Ability to link to an Intranet/HTML format 1 0 0 
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Item Description 

42 Provides a flexible approach to developing 
an effective OSD plan. • 

43 Can be expanded to develop an organization 
wide disaster recovery plan. 

44 Contains exercise schedules. 

45 Includes testing methods and procedures 

46 Contains techniques for evaluation results. 



Total 



Weight X Evaluation = Score 



10 


0 


0 


9 


0 


0 


3 


0 


0 


3 


0 


0 


3 


0 


0 



1,812 
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Recovery Management, Inc. - IlEXSYS, v4.2 

Item Description . : Weight Evaluation Score 

1 Contains multiple levels of security. 10 7 70 

2 Contains user ID and password capability. 10 10 100 

3 Encrypts passwords. 10 10 100 

4 Provides a minimum length of six characters 9 10 100 
in the password field. 

5 Provides the capability to establish security 10 0 0 
levels for each menu item. 

6 Provides password security and protection 
controlled by the Systems Manager, and 
allows users to change their own passwords. 

7 Provides context sensitive help screens. 

8 Is flexible and easy to use. 

9 PC based and menu driven. 

10 Utilizes Query By Example (QBE) 

1 1 Provides a comprehensive Operations 
Manual. 

12 Uses word processing software for 
customization of text files to meet OSD 
requirements. 

13 AUoNvs reports to be recorded in ASCII 
format for input into word processing or 
other software packages. 

14 Contains a comprehensive user report writer 
to allow for customized reports. 

15 Allows the user to select from a variety of 
reports and report sequences. 

16 Allows reports to by printed or viewed on 
the screen. 

17 Provides for the following functions when 
reports are viewed on the screen: -Scrolling 
line-by-line -Scrolling screen-by-screen - 
Panning left and right 

1 8 Includes a project management system. 

19 Store, view and edit key documents in their 
native format (i.e.. Word, Power Point, 
Excel, etc.) 

20 Operates using standard OSD office 
equipment. 

21 Is fiiUy LAN compatible -Supports multiple 
concurrent users -Provides record locking - 
Includes user specific printer assignments 

22 Includes backup and restore procedures. 



4 


0 


0 


1 


1 


1 


1 


0 


0 


1 


10 


10 


9 


5 


45 


10 


4 


40 


10 


10 


100 


10 


10 


100 


10 


10 


100 


10 


10 


100 


4 


10 


40 


1 


10 


10 


2 


10 


20 


10 


7 


70 


10 


10 


100 


9 


10 


90 


4 


5 


20 
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Item Description Weight Evaluation Score 

23 Share and transmit information to OSD 10 10 100 
COOP planners throughout the OSD : ^ 

community (import/export). 

24 Contains data gathering forms that tie to the 
detailed exhibits within the Plan. 

25 Communicate and transfer data to senior 
leadership at OSD relocation sites as well as 
other key government agencies. 

26 Link relocation roster data (name and phone, 
numbers) to call notification systems used to 
notify relocatees of COOP plan execution. 

27 Modify field names without vendor support 

28 Modify field length without vendor support 

29 Add and/or delete fields without vendor 
support. 

30 Ability to mark fields as "required". 

3 1 Provides database management capabilities 
for information best presented in a list 
format (i.e., equipment inventories, 
personnel lists, vendor lists, etc.). 

32 Uses "drop down" screen for selection of key 
fields to provide data input efficiency and 
data integrity. 

33 Provides multi-key access to database 
information and reports. 

34 Provides "memo" fields for certain database 
records allowing over 200 lines of text to be 
added per field. 

35 Allows for a multi-tiered organization. 

36 Allows the user to find specific database 
records or browse the contents of all records 
in table format. 

37 Allows the user to change the sort sequence 
of records within the database files. 

38 Contains a relational database management 
system that support the generation of many 
user defined reports. 

39 Provides a time and events schedule (i.e., 
Project Management System) 

40 Maintains an electronic library of key 
documents 

41 Ability to link to an Intranet/HTML format 

42 Provides a flexible approach to developing 
an effective OSD plan. 
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in 


10 


100 


Q 
0 


Q 

y 


72 


10 


6 


60 


10 
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10 
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10 
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10 
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10 


3 


30 
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8 


64 
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1 A 

10 




10 
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40 


8 


10 


80 
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10 
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10 


0 
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10 


20 


10 
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10 
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Item Description Weight Evaluation Score 

43 Can be expanded to develop an organization- 9 2 18 
^ide disaster jeco very plan. : ^ 

44 Contains exercise schedules. 3 7 21 

45 Includes testing methods and procedures 3 0 0 

46 Contains techniques for evaluation results. 3 2 6 

Total 1,977 
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Appendix C: Acronyms 

CHAIRS 

COOP 

COTS 

CRC 

DFAS 

DMS 

DoD 

DST 

EO 

FDD! 

LAN 

NES 

occ 

OSD 

OUSD(P) 

POLYNET 

SMTP 

SOP 

TCP/IP 

UPS 



Cable Handling and Retriev^ System 

Continuity of Operations 

Commercial off the shelf 

COOP Response Cell 

Defense Finance and Accounting Service 

Defense Messaging Service 

Department of Defense 

Decision Support Tool 

Executive Orders 

Fiber Optic Backbone 

Local Area Network 

Network Encryption Services 

Operations Control Center 

Office of die Secretary of Defense 

Office of the Undersecretary of Defense (Policy) 

Policy LAN Network 

Simple Mail Transfer Protocol 

Standing Operating Procedure 

Transmission Control Protocol/Internet Protocol 

Uninterruptable Power Supply 
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